Issue 6379 - Incorrect handling of '\0' in postal address
Summary: Incorrect handling of '\0' in postal address
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-14 15:44 UTC by ando@openldap.org
Modified: 2014-08-01 21:04 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description ando@openldap.org 2009-11-14 15:44:16 UTC 
Full_Name: Pierangelo Masarati
Version: HEAD,re24
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (93.146.41.236)
Submitted by: ando


postalAddressNormalize uses lutil_strncat() to copy bervals.  If bervals contain
embedded '\0', the resulting string will be incorrect, and shorter than
expected, triggering an assertion failure.  Searches with filter
"(postalAddress=\00)' trigger the assertion.  A fix is coming.

p.
Comment 1 ando@openldap.org 2009-11-14 15:45:26 UTC 
changed notes
changed state Open to Test
moved from Incoming to Software Bugs
Comment 2 ando@openldap.org 2009-11-14 15:54:32 UTC 
changed notes
Comment 3 Quanah Gibson-Mount 2009-11-17 17:40:59 UTC 
changed notes
changed state Test to Release
Comment 4 Howard Chu 2009-11-30 05:31:45 UTC 
changed notes
Comment 5 Howard Chu 2009-11-30 05:31:46 UTC 
published 6379
marked public
changed state Release to Closed
Comment 6 OpenLDAP project 2014-08-01 21:04:26 UTC 
fixed in HEAD
this is a duplicate of ITS#6378
fixed in RE24